?
Solved

How To Allow access to certain websites by IP Address in ISA Server 2004

Posted on 2006-05-10
19
Medium Priority
?
546 Views
Last Modified: 2010-04-08
I need clients to be able to access certain websites that are only specified by IP address, they do not have a corrisponding DNS name.  I have created a list of IP's as a new network called Site IPs, and allowed that along with my Domain List, however, clients are still denied access to the website when an IP is specified.  I would have liked to have imported them into the Domain List, however, that is not an option.  Any hints on how this can be accomplished?

Windows Server 2003
ISA Server 2004
Configured as just a proxy
0
Comment
Question by:Bjorn_Watland
  • 11
  • 8
19 Comments
 

Author Comment

by:Bjorn_Watland
ID: 16649790
This information might help:  When accessing a website via IP, I get the following error:  

Technical Information (for support personnel)
Error Code: 502 Proxy Error. The host server is unreachable. (10065)
IP Address: 199.232.150.242
Date: 5/10/2006 3:53:08 PM
Server: proxy.mysite.com
Source: proxy

If anyone cares to test, that IP address does have a website configured for it, however, I can not reach it using a client configured to go through the proxy server.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16649901
I'm on it.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16649917
Browntech Document Management

I use isa2006 so I will try again shortly with ISA2004
0
Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16649948
How many addresses are there Bjorn?
0
 

Author Comment

by:Bjorn_Watland
ID: 16650166
about 80 addresses
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16650300
Ah. Don't want to be typing THOSE in individually then :)
0
 

Author Comment

by:Bjorn_Watland
ID: 16650320
Well, I already did that when I set up a new network with those IPs specified.  I also have the list in a file, so if there's a handy VB script for importing, I could grab them from there.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16650341
Just as an aside, error 502 is Bad Gateway; not site cannot be reached.
0
 

Author Comment

by:Bjorn_Watland
ID: 16650535
That is the error as I got it.  I did look up this error and did run into bad gateway, and could find very little information about the host server unreachable error.  i did run into this site:

http://www.mcse.ms/archive99-2005-4-1581247.html

But it does not have a solution, only duplicating the problem I have currently.  Is it difficult to export all of the information for ISA 2004 and try out 2006 beta?
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16651269
Its not something I would do on a whim Bjorn to be honest. Lets see what we can do with this first. Let me see what I can find.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16651290
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16651318
0
 

Author Comment

by:Bjorn_Watland
ID: 16651487
I checked out both KB articles and I don' thave any filtering set for signatures using the HTTP filter.  I did some more mucking around though.  There was a site that users needed to access at http://www.waynecountylandrecords.com/.  When i had the list of IP's specified as a network list, even thought I had the list set to allow communication, that site would not work, it would return the same error as above about the host not being reachable.  The reason for this was that I had the IP for http://www.waynecountylandrecords.com/ in my IP list.  Once I took that address out, I can browse to that site just fine.  Maybe rather then a different network, the IPs need to be set up as Computers?
0
 
LVL 51

Accepted Solution

by:
Keith Alabaster earned 2000 total points
ID: 16651534
That is how I have mine (as computers0 as i have single IP addresses to block/allow; not subnets or ranges.
0
 

Author Comment

by:Bjorn_Watland
ID: 16651635
Setting them up as computers work.  It'll just take a while to do the data entry.  Thanks again!
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16651658
Well done yourself. It helps sometimes just to have the conversation. Grateful for the points but I think you can chalk that one as a success to yourself !!

Regards
Keith
ISA MCT
0
 

Author Comment

by:Bjorn_Watland
ID: 16651748
The IT staff of One is always grateful for another person to ask the right questions.
0
 

Author Comment

by:Bjorn_Watland
ID: 16660091
For anyone else wanting help creating a Computer Set from a script, rather then entering in 80 IP's by hand, check out http://www.isascripts.org/ for a bunch of helpful scripts for admins who value their wrists.
0

Featured Post

2018 Annual Membership Survey

Here at Experts Exchange, we strive to give members the best experience. Help us improve the site by taking this survey today! (Bonus: Be entered to win a great tech prize for participating!)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
If you are looking for an automated solution for backup single or multiple Office 365 user mailboxes to Outlook data file, then you can use Kernel Office 365 Backup & Restore tool. Go through the video to check out the steps to backup single or mult…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question